CVE-2010-0136

N/A Unknown

Published: February 16, 2010 Modified: April 29, 2026

Description

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/38695

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/38921

Source: cve@mitre.org

Broken Link

http://securitytracker.com/id?1023588

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.debian.org/security/2010/dsa-1995

Source: cve@mitre.org

Third Party Advisory

http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:221

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/38245

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.ubuntu.com/usn/USN-903-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2010/0635

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/2905

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html